Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/d8d3f44a-91f0-3adf-be97-fe9971bf453b.roa
File:                     d8d3f44a-91f0-3adf-be97-fe9971bf453b.roa (raw, json)
Hash identifier:          57wyCUYYzzR2Js4poecb4B4Cwc6neTL4J7b7kDuRORE=
Subject key identifier:   30:FB:2B:AF:F1:3B:F6:F9:0F:86:DB:20:B1:C0:F3:9F:0D:0E:B5:BE
Certificate issuer:       /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial:       010D0C9F4328584F94D337D1994C67C6CEA96E40
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/d8d3f44a-91f0-3adf-be97-fe9971bf453b.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     401243
IP address blocks:        2602:2b5:16::/48 maxlen: 48
                          2602:2b5:17::/48 maxlen: 48
                          2602:2b5:18::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:37:d1:99:4c:67:c6:ce:a9:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=91850930-c871-46de-8be4-e1dd43bb10fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:be:f8:80:fe:cb:0c:ec:0f:a6:a2:07:1b:36:
                    5b:09:05:17:67:cf:d1:d0:58:d4:02:bc:61:7e:f0:
                    ca:73:48:5d:c9:9c:9d:0e:7f:1c:bd:9b:61:49:29:
                    d1:8b:51:97:2c:7a:a5:d5:8f:e3:61:ae:e6:4e:25:
                    83:09:e5:59:17:01:a3:a8:ee:c2:e6:1f:dd:9e:b3:
                    54:3a:6c:7d:91:36:e3:f2:a0:59:6a:b8:c3:72:78:
                    40:48:86:9d:c2:f4:7c:aa:6b:b2:80:3a:84:8e:09:
                    e4:32:ab:4d:e3:81:4a:68:fe:64:32:25:4e:7a:05:
                    de:96:3b:79:cc:b8:81:a4:2e:12:4b:bd:2c:7f:25:
                    89:28:1c:eb:0e:3e:b8:c3:70:d9:7e:8f:41:96:17:
                    8d:50:21:a8:ed:42:5d:3e:e9:d3:85:6a:a4:a0:3b:
                    e9:cf:c5:61:35:12:8f:31:e1:01:0e:55:fe:16:43:
                    89:bd:80:0d:0a:34:cc:7e:58:27:8c:24:79:52:b4:
                    b2:66:b2:9d:76:e2:a9:91:b2:84:12:76:58:08:93:
                    d4:c3:57:c9:67:e9:bd:24:aa:c9:40:ba:21:a0:5f:
                    dc:9c:b8:22:a2:13:e9:d8:9e:8f:bc:67:f7:98:54:
                    b0:58:f2:50:4f:47:4a:87:11:b6:19:f2:1b:a2:43:
                    07:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FB:2B:AF:F1:3B:F6:F9:0F:86:DB:20:B1:C0:F3:9F:0D:0E:B5:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/d8d3f44a-91f0-3adf-be97-fe9971bf453b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl

            X509v3 Authority Key Identifier:
                keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b5:16::-2602:2b5:18:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:d8:53:9f:5b:d9:9e:8d:7d:0c:a0:9d:0e:f2:63:dd:54:2f:
         37:80:71:b6:4a:56:22:41:48:8c:93:3b:1b:0d:aa:ef:63:25:
         79:6f:a9:59:84:b1:e5:53:17:f3:4b:d0:d8:54:08:ea:51:ca:
         c5:c7:22:86:62:2d:f6:12:d3:34:e7:81:bf:3b:c0:c4:2c:5e:
         8c:8c:31:f0:b3:44:c5:a1:37:ca:39:08:18:87:15:48:ce:ce:
         b0:63:8d:49:db:63:78:f4:ce:da:1e:ec:0b:ea:bf:b9:10:37:
         f7:83:94:e3:69:98:36:43:b3:ae:5f:07:6a:da:3e:e3:34:18:
         3c:cb:db:a2:25:37:d3:72:a3:46:4c:4b:4f:2f:8c:c8:09:de:
         24:d9:3a:a6:8c:66:e6:0c:69:c4:0b:a8:5f:7b:5e:54:b9:5c:
         aa:c2:35:b9:46:bf:4e:5f:75:53:45:ea:0e:e8:d4:b7:ab:71:
         dc:48:42:67:04:d3:61:1a:fe:93:01:45:d8:17:c2:83:b8:03:
         af:75:5b:68:36:2d:1d:b0:70:5d:1b:18:f6:16:a3:7f:6d:66:
         7b:de:22:36:88:6a:b4:42:f4:27:83:1d:41:bf:28:ee:da:f8:
         37:43:35:bc:9b:c5:33:ba:de:27:94:6a:10:43:fc:bf:e4:8a:
         17:67:0d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:07:30 2026 by rpki-client